Privacy Policy

Last updated: September 2026

Introduction

This Privacy Policy explains how Shivabhi Technologies Private Limited, a company incorporated in India (CIN U62011GJ2026PTC183538) and trading as BolWise ("we", "us", "our"), handles your information when you use BolWise, our voice-to-text application. By using BolWise you agree to this policy. We are committed to your privacy and to our obligations under the GDPR, India's Digital Personal Data Protection Act 2023, the CCPA, and other applicable privacy laws.

Scope

This policy applies to the BolWise app, the website at bolwise.com, and our API. It does not cover third-party applications or websites you reach through BolWise.

How BolWise Works

BolWise records audio when you press your dictation hotkey, converts it to text using specialist cloud speech-recognition and language services, and returns the polished result to your device. Unlike apps that transcribe on your own machine, BolWise processes in the cloud. This section exists so you know that before you read the rest.

In most dictations your device streams the audio directly to the speech-recognition service, using a single-use credential that our server issues and that expires within minutes — the audio never passes through our servers at all. On some paths, and whenever that route is unavailable, it is relayed through our API instead. Either way it exists only for the moment it takes to transcribe, and is never written to disk.

Our Data Processing Guarantees

• No training on your content.Your audio and transcripts are not used to train or improve AI models — ours or anyone else's. Our speech providers are bound to this, by contract or by an account-level setting we have switched off, and our language provider does not train on API traffic.
• No retention on our servers. Your audio and transcripts are held in memory only while a single dictation is processed, then discarded. We do not write them to disk, we do not log them, and we do not store them.
• What our providers keep, under their own terms. We want to be straight with you about the part we do not control. The speech-recognition service that handles almost every dictation stores nothing: audio and transcripts are processed in passing and not retained, under an independently audited security programme. A second speech service, used only as a fallback, retains audio and transcripts for a period it does not publish, and its immediate-deletion mode is offered only on enterprise agreements, which we do not hold. Our language provider retains API traffic for up to 30 days for abuse monitoring. None of them uses your content to train models.
• History stays on your device. Your dictation history lives in the app on your own computer. We cannot read it. If you delete it, it is gone.

These guarantees will not change without prior notice to you.

Information We Collect

Account information. Your email address and a password. Passwords are hashed by our authentication provider and we cannot read them.

Usage records. For each dictation we record its duration in seconds, the language setting, and the time it happened — attached to your account. We do not record what you said. These are counts, not content. We need them to bill correctly, to detect abuse, and to enforce fair use.

Technical information. Standard server logs — IP address, timestamp, request path, response status, app version — kept for security and debugging. We also track which device is currently signed in, because signing in on a new computer signs out the previous one.

Website analytics. On bolwise.com we use Google Analytics to count visits, see which pages people read, and tell when someone clicks Download. Google sets cookies or uses similar identifiers in your browser. We do not send the query string or hash of a URL (so a confirmation or password-reset link cannot leak to Google), we do not send what you type, and we do not use this data for advertising. The tag does not run on the account confirmation page, password reset, account billing pages, or the internal admin dashboard.

Payment information. We never see your card details. Payments are processed by Razorpay. We receive your subscription status, plan, billing country, and payment method type — not your full card number.

Who We Share It With

We do not sell your data and we do not share it for advertising. We use service providers to run BolWise: speech and language processing providers, cloud hosting, authentication, billing, email delivery, and website analytics (Google Analytics). Each processes data only on our instructions under a written agreement.

We may disclose information where legally required, or to investigate fraud and protect people's safety.

We identify our service providers by category rather than by name. If you want the names, ask us at support@bolwise.com and we will tell you which sub-processors handle your personal data; business customers can have the full list under a data processing agreement.

Where Your Data Goes

BolWise is operated from India by Shivabhi Technologies Private Limited. Our API is hosted in the European Union, our database is hosted in Japan, and our speech-recognition, language-processing and website analytics providers are in the United States. Your data therefore crosses borders.

For personal data from the EU and UK we rely on an adequacy decision of the European Commission wherever one covers the destination: Japan is an adequate jurisdiction, and some of our United States providers are certified under the EU-US Data Privacy Framework and its UK extension. Where no adequacy decision applies, we rely on Standard Contractual Clauses.

How Long We Keep It

Audio and transcripts are not retained. Your account record lasts until you delete your account. Usage records are kept for 24 months. Server logs are kept for 90 days. Billing records are kept as long as tax law requires. Website analytics events are retained by Google for up to 14 months.

Microphone Access

BolWise needs microphone permission to work. It records only while you are actively holding or have toggled the dictation hotkey. There is no wake word and it does not listen in the background. You can revoke the permission in your system settings at any time.

Your Rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. You can withdraw consent where we rely on it. Email support@bolwise.com and we will respond within 30 days. We may ask you to write from the email address on your account so we know it is you.

Deleting your account removes your account and usage records. Billing records we are legally required to keep are retained. Your local history is yours to delete.

Children

BolWise is not for anyone under 18 and we do not knowingly create accounts for children.

Changes to This Policy

We may update this policy. Changes take effect when posted here. If a change materially affects how we handle your data, we will email you first.

Contact and Complaints

Questions or requests: support@bolwise.com

Grievance Officer (India, DPDP Act 2023 and SPDI Rules 2011): Shivabhi Technologies Private Limited, support@bolwise.com. We acknowledge grievances within 7 days and resolve them within 30 days. Our registered office is set out at the foot of this page.

If you are in the EU or UK and we have not resolved your concern, you may complain to your national data protection authority. In India, you may approach the Data Protection Board.

See also our Terms of Service and Refund Policy.